Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bwAuIWbvEdp7iWziWbNULohpBTk.roa
File: bwAuIWbvEdp7iWziWbNULohpBTk.roa (raw, json)
Hash identifier: 0h3M8FKixjf7B72CmX507VH0bdSv0zeNHKjqdDBOTVA=
Subject key identifier: 6F:00:2E:21:66:EF:11:DA:7B:89:6C:E2:59:B3:54:2E:88:69:05:39
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27FC12E7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bwAuIWbvEdp7iWziWbNULohpBTk.roa
Signing time: Sat 01 Jan 2022 16:09:18 +0000
ROA not before: Sat 01 Jan 2022 16:09:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61230
IP address blocks: 185.67.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670831335 (0x27fc12e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f002e2166ef11da7b896ce259b3542e88690539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:bf:36:7c:52:9d:51:1f:0c:39:3c:ec:7d:
68:36:f7:15:e1:fc:ba:b5:36:ec:e6:e1:1e:6b:44:
b4:39:35:83:6c:16:74:2a:a1:97:c2:a9:3d:c6:c9:
c3:bb:4e:bd:10:ee:8b:69:d7:95:63:0c:8d:55:be:
e9:26:ae:c8:b8:5a:e3:5b:67:09:12:4d:da:f6:24:
11:88:4f:ae:e4:e2:32:da:c6:89:08:13:04:87:0f:
25:12:e9:75:d3:4c:40:57:61:05:0b:1e:c4:b3:b0:
81:1d:88:d2:ba:73:0c:ea:e8:d4:f1:20:c4:71:ad:
49:9d:cd:87:0b:07:f9:51:b4:0f:ba:89:02:1a:df:
4f:0d:8c:93:a1:a1:34:75:1e:9d:81:07:ef:82:70:
82:92:38:58:5f:dd:c1:21:7a:df:7a:be:db:7f:2a:
88:7c:5b:69:4f:89:57:d8:b1:10:59:96:6f:f5:fc:
d5:0c:e0:e2:df:3b:ad:57:17:63:6d:3b:2d:d4:41:
9e:68:19:23:fb:ce:07:3e:fb:7f:8c:bb:b2:65:7c:
9a:9a:c8:a8:22:1f:5c:4a:51:d1:ba:6b:b4:d2:c8:
b1:2d:56:c7:99:e5:5d:6d:10:30:58:b5:8f:db:70:
99:9f:ff:54:bf:06:aa:46:ce:aa:f4:6f:72:ed:12:
70:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:00:2E:21:66:EF:11:DA:7B:89:6C:E2:59:B3:54:2E:88:69:05:39
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bwAuIWbvEdp7iWziWbNULohpBTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:57:7a:b3:c1:20:8c:29:2e:b9:bd:ce:5a:16:17:70:82:54:
d5:29:a3:8e:b3:50:ba:9e:2d:7c:ee:0f:21:07:e2:74:24:0d:
c5:87:a2:8a:30:97:38:60:fa:7f:ae:2b:54:f7:78:2c:be:0e:
7c:8c:9c:5c:6f:f9:9c:7b:1d:88:65:ff:ce:28:a1:11:18:8d:
aa:55:5a:01:f6:44:3b:ce:3e:7e:6b:3a:c5:4f:e3:1e:5f:9d:
8a:ac:56:d4:82:bc:a1:19:50:e1:f6:ed:50:13:b6:7a:ee:cc:
fb:d4:ff:fa:e2:58:4c:e0:8f:d2:d6:67:db:84:3d:ba:fa:a3:
ed:bf:ee:45:9c:f7:8e:e7:01:10:59:7d:5c:bb:c0:07:6c:b6:
da:21:9f:13:73:da:e0:21:24:a5:12:ce:9a:f4:09:41:6a:46:
5c:fa:78:a4:8f:8a:f9:ab:bb:1b:c1:bc:d9:68:60:67:06:e4:
c5:79:ba:88:1f:34:f2:97:83:37:f1:56:c7:54:39:ad:ab:b0:
99:3b:d2:d1:69:6c:7d:c2:fa:b7:20:c1:c0:d6:da:7c:47:bd:
0c:1b:d5:85:d8:c8:8a:2a:d6:e0:1b:0b:6a:71:3b:d0:e2:8b:
22:75:ed:dc:75:fd:cc:19:47:c7:85:a2:a3:9c:14:a9:c6:26:
1e:c2:dd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:54 2025 by rpki-client